From 791183b6398c11576d63bda6cd48c07fbbd97bb8 Mon Sep 17 00:00:00 2001 From: Daniel Black Date: Tue, 1 Oct 2013 10:10:53 +1000 Subject: [PATCH] ENH: filter.d/uwimap-auth - add SYSTEM BREAK-IN ATTEMPT --- config/filter.d/uwimap-auth.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/filter.d/uwimap-auth.conf b/config/filter.d/uwimap-auth.conf index 30f2b7bc..c6a062dc 100644 --- a/config/filter.d/uwimap-auth.conf +++ b/config/filter.d/uwimap-auth.conf @@ -10,6 +10,6 @@ before = common.conf _daemon = (?:ipop3d|imapd) -failregex = ^%(__prefix_line)sLogin (?:failed|excessive login failures) user=\S* auth=\S* host=.*\[\]\s*$ +failregex = ^%(__prefix_line)sLogin (?:failed|excessive login failures|SYSTEM BREAK-IN ATTEMPT) user=\S* auth=\S* host=.*\[\]\s*$ ignoreregex =